Privacy Policy
PRIVACY POLICY
We do everything we can to make you feel safe with us and declare that we have taken all appropriate technical and organizational measures to secure your personal data. Your personal data is encrypted on our servers.
Operator
The operator of personal data pursuant to Section 5(o) of Act No. 18/2018 Coll. on the protection of personal data, as amended (hereinafter referred to as the "Act") is LUX-BS, s.r.o., Jókaiho 32, 945 01 Komárno, Company ID No.: 36282901, Tax ID No.: 2022146236 (hereinafter referred to as the "Operator").
The operator's contact details are: registered office address: Jókaiho 32, 945 01 Komárno business address: Kammerhofská 18, 969 01 Banská Štiavnica email: penzion.kachelman@gmail.com
What types of personal data we collect and why we need it
Identification data – first name, – last name, – date of birth, – ID card number, – passport number or other identity document number.
Contact details – home address, – telephone numbers, – email address, – Facebook/Google address if you have given your consent.
Descriptive data – email address, license plate number, – behavior in our establishments, – activities in our establishments, – attempts to abuse our services.
Personal Data Processing Policy
Principle of legality
Personal data may only be processed in a lawful manner and in such a way that the fundamental rights of the data subject are not violated.
Principle of purpose limitation
Personal data may only be collected for a specific, explicitly stated and legitimate purpose and may not be further processed in a manner incompatible with that purpose; further processing of personal data for archiving purposes, scientific purposes, historical research purposes or statistical purposes, if it complies with a specific regulation8) and if appropriate safeguards for the protection of the rights of the data subject pursuant to Section 78(8) are observed, shall not be considered incompatible with the original purpose.
Principle of minimization of personal data
The personal data processed must be adequate, relevant, and limited to what is necessary for the purposes for which they are processed.
Principle of correctness
Personal data processed must be accurate and, where necessary, kept up to date; reasonable and effective measures must be taken to ensure that personal data that are inaccurate, having regard to the purposes for which they are processed, are erased or rectified without undue delay.
Principle of storage minimization
Personal data must be stored in a form that allows the identification of the data subject for no longer than is necessary for the purposes for which the personal data are processed; personal data may be stored for longer if it is to be processed solely for archiving, scientific, historical research, or statistical purposes on the basis of a specific regulation and if appropriate safeguards for the protection of the rights of the data subject are observed in accordance with Section 78(8) of the Act.
Principle of integrity and confidentiality
Personal data must be processed in a manner that ensures appropriate security of personal data, including protection against unauthorized processing of personal data, unlawful processing of personal data, accidental loss of personal data, erasure of personal data, or damage to personal data.
Principle of responsibility
The operator is responsible for complying with the basic principles of personal data processing, for ensuring that personal data processing complies with the principles of personal data processing, and is obliged to demonstrate this compliance with the principles of personal data processing to the authority upon request.
Transfer of data to third countries
The operator does not intend to transfer personal data to a third country (outside the EU) or to an international organization.
Personal data security
To protect your personal data, we have implemented appropriate technical, security, and organizational measures in accordance with the requirements and regulations of applicable legislation. All your personal data in electronic form is stored on secure data servers.
How long we retain your personal data We retain your personal data for the period necessary to exercise the rights and obligations arising from the contractual relationship between us and to enforce claims arising from this contractual relationship. Personal data whose storage is necessary for the fulfillment of all our obligations arising from legal regulations must be stored for the period specified by the relevant legal regulation, regardless of your consent. For tax and accounting documents, this period is usually 10 years. In the case of marketing activities or other cases for which you have given us your consent, we will retain your data until you withdraw your consent.
Your rights
You have several rights in relation to the protection of personal data that you can exercise: – the right to withdraw your consent to the processing of personal data at any time:
- the right to supplement or correct personal data
- right of access to data
- right to erasure of personal data
- right to restriction of processing
- right to raise an objection
- right to file a complaint
- right to data portability
Right to supplement and correct
If your data is incorrect, you can edit it directly in your user account settings or contact us directly at our email address and request that it be corrected and supplemented.
Access to data
You have the right to request an overview of the data we process about you, for what purpose, to whom we provide it, and how long we will store it, by sending an email to .
Right to erasure of personal data
You have the right to request that we delete your personal data that we process if the following conditions are met and this does not affect data that we are required to retain by law (e.g., invoices): -The personal data is no longer necessary for the purposes for which it was collected and processed -You withdraw your consent on the basis of which the personal data was processed and there is no other legal basis for the processing of personal data -Personal data has been processed unlawfully -The reason for erasure is to comply with an obligation under law, a specific regulation or an international treaty -The personal data relates to a person under the age of 16
Right to restriction of processing
You have the right to request that we restrict the processing of your personal data in the following cases: -you contest the accuracy of the personal data, until the accuracy of the personal data is verified -the processing of your personal data is unlawful -we no longer need your personal data for the purposes of processing, but you need it for the establishment, exercise, or defense of your legal claims -you object to the processing of your personal data in accordance with the previous point
Right to object
You have the right to object to the processing of your personal data on grounds relating to your particular situation, which is carried out on the basis of our legitimate interest, including profiling based on these provisions. You also have the right to object to the processing of your personal data for direct marketing purposes.
Right to lodge a complaint You have the right to lodge a complaint with the Office for Personal Data Protection if you believe that your personal data has been processed in violation of applicable personal data protection legislation. Contact details can be found here.